
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa
File: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (raw, json)
Hash identifier: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=
Subject key identifier: 25:63:45:86:B0:0D:FE:FE:C8:19:6E:EE:DB:59:35:E9:28:0F:49:ED
Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E
Certificate serial: 6FC29F28B3FA027A8D70A53FC7C42EA78A7EA274
Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa
Signing time: Sun 03 May 2026 02:56:33 +0000
ROA not before: Sun 03 May 2026 02:51:33 +0000
ROA not after: Sun 02 May 2027 02:56:33 +0000
asID: 152777
IP address blocks: 157.66.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl
rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c2:9f:28:b3:fa:02:7a:8d:70:a5:3f:c7:c4:2e:a7:8a:7e:a2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E
Validity
Not Before: May 3 02:51:33 2026 GMT
Not After : May 2 02:56:33 2027 GMT
Subject: CN=25634586B00DFEFEC8196EEEDB5935E9280F49ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:32:cf:f5:c8:f0:8b:2d:1e:4a:5b:09:ab:
6b:6c:e2:70:61:b4:dc:8e:bb:2f:a6:c5:1f:6b:6d:
40:dd:f6:73:f6:ad:e0:6d:cf:81:f3:7c:3a:f4:22:
e3:de:b7:3c:5c:ec:37:35:73:cc:f7:79:9b:d4:71:
b4:20:47:27:c5:03:da:b8:bc:b4:78:ab:a6:30:42:
84:84:ec:d6:74:f6:60:71:8a:d5:5a:6d:f1:e3:f0:
2b:ff:00:e6:4e:6a:88:86:f3:3e:c9:04:05:dd:60:
e2:e0:58:7a:7e:ca:e6:13:81:23:1a:10:e1:0f:b7:
fa:2a:ec:68:88:08:fe:a6:5a:f6:0a:12:0d:4d:01:
0d:b6:77:8a:d5:70:b8:17:a5:5c:bf:c6:5b:9d:a3:
21:af:2a:81:81:1a:03:19:b6:6a:a9:6d:da:5d:9c:
c1:9d:81:ce:ac:8d:ba:3a:be:1b:db:7c:ce:62:f2:
16:ac:6b:be:3e:99:3f:90:f6:2c:4b:0e:43:d5:a6:
f3:1e:4a:66:32:cc:d1:45:8b:2d:9c:c7:5d:45:8d:
05:bc:d7:e4:04:cb:40:84:9a:80:ea:28:f7:17:da:
9d:c9:f5:60:ef:d8:56:02:b9:56:fd:ab:22:64:78:
58:0a:18:78:aa:3e:78:2f:7d:21:c8:45:d4:fe:5b:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:45:86:B0:0D:FE:FE:C8:19:6E:EE:DB:59:35:E9:28:0F:49:ED
X509v3 Authority Key Identifier:
keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.170.0/24
Signature Algorithm: sha256WithRSAEncryption
18:12:4b:cd:5c:a2:ef:47:a9:12:c4:fa:22:b8:89:2f:40:dc:
cf:bf:97:a8:07:14:fd:3e:93:2e:c9:05:aa:1c:26:ed:b9:b0:
30:8f:82:5d:32:f0:a3:69:0b:40:27:9c:65:c4:d7:1c:85:d4:
6f:d3:6b:39:5b:b8:0f:bd:69:a3:ae:2f:fa:03:13:5f:6b:7d:
5a:ad:2f:21:0d:52:91:da:40:62:b4:33:6b:d3:2b:e6:ab:6d:
5c:30:a9:99:f2:03:a0:cc:db:7e:62:db:85:13:c7:7f:26:b8:
dd:4c:81:4a:46:95:e9:3c:bc:83:3c:97:c0:a3:37:92:f8:49:
9d:6d:05:2b:9d:58:ab:5b:c8:f9:2d:e3:a5:54:a5:a9:99:c6:
f7:37:c1:12:74:af:5e:85:a7:28:2d:46:6f:52:11:9a:91:89:
78:ff:2d:e9:84:e3:5b:7c:b0:f9:81:10:d2:bc:b2:05:8f:b5:
9b:b9:b7:2f:09:2c:0d:99:f5:cc:d5:00:c6:4f:10:76:53:cd:
16:54:b2:0d:68:b5:40:f4:d0:0a:3d:a1:d6:10:1d:8c:c2:02:
ff:5f:cd:2d:3f:32:e3:fb:fb:61:1f:ae:61:d2:e3:65:38:fd:
db:8d:f3:58:8e:81:60:51:b6:3d:53:91:d4:75:bd:ed:ac:fe:
43:c3:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:29 2026 by rpki-client